Adding Names of Domains Allowed to Search This Domain

Each domain LDAP entry specifies access permissions in ACE's, which are defined
in the domainAccess parameter of the icsExtendedDomainPrefs attribute. Two different ways to allow external domains to search this
domain are:

Using Delegated Administrator Console, when creating or editing an
organization's properties, you can add domains to the Allow Invitations From
Users in These Organizations list.

This updates the domainAccess preference in the icsExtendedDomainPrefs attribute.

Note –

While you can specify the exact permissions given to the domains in the
first two methods just listed, the last one, using the Delegated Administrator Console,
does not allow the administrator as much control. The list of permissions is preset.
The permissions given are: free-busy access, and event scheduling access. The user
can't see event details unless the owner of that calendar has set permissions to allow
all users to read it.

To Allow All External Domains to Search This Domain

There are three ways to allow all external domains to search this domain:

Using ldapmodify, create the following ACE string
in the domainAccess preference of the icsExtendedDomainPrefs:

@^a^slfr^g

Form the ACE by
specifying that all domains have sufficient access to perform searches.

Using Delegated Administrator Console, when creating or editing an
organization's properties, you can add domains to the Allow Invitations From
Users in These Organizations list.

This updates the domainAccess preference in the icsExtendedDomainPrefs attribute.

Note –

While you can specify the exact permissions given to the domains in the
first two methods just listed, the last one, using the Delegated Administrator Console,
does not allow the administrator as much control. The list of permissions is preset.
The permissions given are: free-busy access, and event scheduling access. The user
can't see event details unless the owner of that calendar has set permissions to allow
all users to read it.